Error: rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
File:                     zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft (raw, json)
Hash identifier:          K/H4/9M/fjGEwzqU0Dn3A8XPk50ffROcxb64M887Al4=
Subject key identifier:   C9:94:A8:1A:CA:7E:AD:9B:27:90:E1:93:36:E2:06:AB:A6:44:F9:C6
Authority key identifier: CC:D7:EE:5F:0F:73:77:CF:85:33:E6:57:37:ED:11:1F:20:17:B6:01
Certificate issuer:       /CN=F36831A0AF/serialNumber=CCD7EE5F0F7377CF8533E65737ED111F2017B601
Certificate serial:       0182
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
Manifest number:          017F
Signing time:             Fri 25 Sep 2026 05:09:43 +0000
Manifest this update:     Fri 25 Sep 2026 05:09:42 +0000
Manifest next update:     Sun 27 Sep 2026 05:09:42 +0000
Files and hashes:         1: zNfuXw9zd8-FM-ZXN-0RHyAXtgE.crl (hash: 0/SYDXDhqRkHLjOtIbMUtJvlw9IgRoqHWyynUvMJhwk=)
                          2: E2260ED092F711F0A755CCC9DAE4EC9C.roa (hash: Db2CiRM4uTKtHBAzQvrLoynjynVhOmVsLHGoU4aqlVA=)
                          3: CAA0A8CA92F611F08941CFC1DAE4EC9C.roa (hash: cZYmCRPcuK5aw4+CfGix0WDAzqJ34AZ7hKPsTZ/sAy4=)
                          4: A2111EC092F711F0BD7EB2C9DAE4EC9C.roa (hash: O/Z3Ckngn3+2t7fcmEz+onvx7IwbPvoP3rUMyC0EVL4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 05:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 386 (0x182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36831A0AF, serialNumber=CCD7EE5F0F7377CF8533E65737ED111F2017B601
        Validity
            Not Before: Sep 25 05:09:42 2026 GMT
            Not After : Sep 27 05:09:42 2026 GMT
        Subject: CN=6ab60217-0a8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:eb:69:9b:18:45:1d:54:fa:44:18:34:9f:9a:
                    f0:1f:d9:c5:1e:95:dc:aa:2d:fb:5a:33:81:42:83:
                    01:7c:ee:95:41:a8:01:18:fb:c1:5f:80:cc:f5:e4:
                    68:e9:90:11:4f:fd:3e:9f:74:20:53:3e:26:8c:a3:
                    6a:00:f5:ef:47:69:85:92:0c:be:d8:9d:65:62:f0:
                    84:21:88:01:d1:41:f1:a4:33:10:a8:6f:f8:11:20:
                    c6:7d:1f:33:a4:b9:a0:bf:51:9a:34:e0:da:55:e8:
                    1c:ca:4d:41:19:db:fd:4e:e1:70:1e:0f:2e:53:b7:
                    da:db:dc:77:63:c0:2f:40:80:5a:90:66:3c:d0:6f:
                    80:50:4d:ff:3a:7f:f3:ad:e9:d9:1a:19:e1:43:27:
                    6f:00:dc:fb:8b:4f:41:80:8b:97:8d:bd:3b:2c:1a:
                    43:ec:17:58:45:f4:de:71:e7:49:bd:bc:ff:57:22:
                    fc:74:5e:48:70:2d:e4:01:26:45:7b:7b:b0:84:b7:
                    3c:17:9b:47:8b:53:3a:4d:7c:30:c1:72:09:72:ba:
                    3f:92:66:a5:04:22:03:9d:9f:cd:20:5e:22:bf:ad:
                    66:8c:f7:55:67:c6:24:5b:44:29:c9:4b:e8:98:ec:
                    bf:34:4e:fc:fd:31:e7:5f:e1:d5:2c:6a:3a:ca:e9:
                    74:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:94:A8:1A:CA:7E:AD:9B:27:90:E1:93:36:E2:06:AB:A6:44:F9:C6
            X509v3 Authority Key Identifier:
                keyid:CC:D7:EE:5F:0F:73:77:CF:85:33:E6:57:37:ED:11:1F:20:17:B6:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:84:2c:b1:9e:98:9f:8b:fd:a5:c0:e5:23:60:cc:de:62:46:
         7d:9d:ad:e2:26:5a:c2:d8:09:cf:4e:d6:28:f1:25:ca:48:64:
         4c:05:39:ba:98:bc:35:4f:c1:f9:97:5c:04:a5:7f:25:25:74:
         8c:78:0b:32:fc:37:d4:8b:23:aa:df:9c:05:bd:a4:2b:e6:58:
         ac:29:e6:15:3c:cd:5a:a5:25:05:00:ae:b9:43:8d:fa:bc:2f:
         a1:da:fb:68:e4:3b:b9:b0:b8:e5:d2:e8:b3:2b:b2:cc:15:a5:
         66:ed:45:66:e5:79:e4:9e:0d:df:d2:e9:23:e3:39:0c:70:e5:
         2c:67:3c:cc:25:e3:c9:27:f0:39:9c:ba:ea:8f:ca:cf:93:ba:
         70:90:74:b7:1f:0b:8c:22:0e:f5:34:e9:9e:f9:89:8e:7d:43:
         45:fb:14:1a:bb:31:e4:38:6e:57:71:df:1d:a3:ed:e7:16:94:
         ae:19:1f:af:ec:ed:f0:04:c2:b3:b0:68:77:18:33:5a:54:1e:
         0b:92:f2:6a:de:76:91:bf:49:63:41:be:dc:69:15:0a:03:43:
         f9:bd:8f:91:21:36:0c:09:01:54:54:7b:3e:d8:86:85:94:63:
         54:f4:44:1e:9c:f6:f9:c5:a6:68:ef:b1:92:91:e5:40:a4:1f:
         88:3d:3f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:20:48 2026 by rpki-client